Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-5664

Опубликовано: 31 авг. 2013
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:4.0.0:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.0.1:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.0.2:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.0.3:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.0.4:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.0.5:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.0.6:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.0.7:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.0.8:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.0:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.1:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.2:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.3:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.4:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.5:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.6:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.7:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.8:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.8-h3:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.9:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.10:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.11:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:4.1.12:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:5.0.0:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:5.0.0-h1:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:5.0.2:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:5.0.3:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:5.0.4:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:5.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 70%
0.00638
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908.

EPSS

Процентиль: 70%
0.00638
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79